Last updated: June 27, 2026
Firmus Group (“Firmus”, “we”, “us”) respects your privacy and is committed to
protecting the personal data you share with us. This Privacy Notice describes how we
collect, use, store and protect personal information, and is issued in compliance with
the Mexican Federal Law on Protection of Personal Data Held by Private Parties
(Ley Federal de Protección de Datos Personales en Posesión de los Particulares, “LFPDPPP”)
and its Regulations, as well as the California Consumer Privacy Act (CCPA) as amended
by the California Privacy Rights Act (CPRA).
1. Data Controller (Responsable)
Firmus Group is the entity responsible for the processing of your personal data.
For any privacy request you may contact us at
privacy@firmus.group.
2. Personal Data We Collect
Depending on your interaction with us, we may collect: identification and contact data
(name, email, telephone), professional or commercial data, and technical data such as IP
address, device and browsing information collected through cookies and similar technologies.
We do not knowingly collect sensitive personal data unless strictly necessary and with your
express consent.
3. Purposes of Processing
Primary purposes: to respond to inquiries, provide and manage our services,
and comply with contractual and legal obligations.
Secondary purposes: marketing, surveys and statistical analysis. You may
object to secondary purposes at any time by writing to the email above.
4. Legal Basis
We process your data based on your consent, the performance of a contract, our legitimate
business interests, and compliance with applicable legal obligations.
5. Your Rights (ARCO & CCPA/CPRA)
Under the LFPDPPP you have the right to Access, Rectify, Cancel and Object (derechos
ARCO) to the processing of your data, as well as to revoke your consent and limit its use
or disclosure.
If you are a California resident, under the CCPA/CPRA you have the right to:
- Know what personal information we collect, use, disclose or sell/share.
- Request access to and deletion of your personal information.
- Correct inaccurate personal information.
- Opt out of the “sale” or “sharing” of your personal information.
- Limit the use of sensitive personal information.
- Not be discriminated against for exercising your privacy rights.
We do not sell your personal information for monetary value. To exercise any right, contact
privacy@firmus.group; we will respond within the time
frames required by applicable law.
6. Cookies and Tracking
Our website uses cookies and similar technologies to operate, analyze traffic and improve
your experience. You can disable cookies through your browser settings.
7. Data Sharing and Transfers
We may share data with service providers acting on our behalf and with authorities when
legally required. Any international transfer will be carried out with appropriate safeguards
and in accordance with applicable law. We do not transfer your data to third parties for their
own marketing purposes without your consent.
8. Security and Retention
We apply administrative, technical and physical safeguards to protect your data and retain
it only for as long as necessary to fulfill the purposes described above and to comply with
legal obligations.
9. Changes to this Notice
We may update this Privacy Notice. The current version will always be available on our
website with its corresponding update date.
This document is provided for
illustrative and informational purposes and does not constitute legal advice.
